Static task
static1
Behavioral task
behavioral1
Sample
8860e2c8c7ed20ec0faca8827ca12d56_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8860e2c8c7ed20ec0faca8827ca12d56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8860e2c8c7ed20ec0faca8827ca12d56_JaffaCakes118
-
Size
97KB
-
MD5
8860e2c8c7ed20ec0faca8827ca12d56
-
SHA1
cc742ce0f21023137402a184053f97c0cd4842ab
-
SHA256
55c54db3c813414954b2b5f404ea8e9f33d055af02380fc5292bba480862600c
-
SHA512
c7a49696fc84259eca104df6c2970f2548200363524d9a073ad8fa8b4b513f9a84aeb054263a47465673d5aa17e299a3e9c9789e72c256dcc6cce689a3bbcc0e
-
SSDEEP
1536:2T1oKWp9INC7HIN16y+psbj3jX/yVU4You+zdD0EIAOfGr5iVMx/wR8gznXMN:2mKWp2C7HIv6RpsjkUEuYdD0tFOLx/wK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8860e2c8c7ed20ec0faca8827ca12d56_JaffaCakes118
Files
-
8860e2c8c7ed20ec0faca8827ca12d56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 584KB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.4MB - Virtual size: 27.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE